gem-vpn.connect.uni-hannover.de

- Leibniz Universitaet Hannover -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:4e:98:bf:37:e5:89:aa:46:d7:95:99 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Leibniz Universitaet Hannover

Organization: Leibniz Universitaet Hannover
Organization unit: LUIS
State / Province: Niedersachsen
Locality: Hannover
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:4e:98:bf:37:e5:89:aa:46:d7:95:99
Serial Number (int): 11545962904380999689219577241
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: be:43:4a:60:a8:23:2f:c1:ae:94:1f:ac:56:8c:a0:d1:fd:30:0b:a4
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e1:0a:67:e1:e6:2d:39:b2:a7:19:66:2b:15:e4:1d:8d:00:98:a4:e4
Fingerprint (sha256): 00:4b:fa:9c:62:c2:d7:db:d9:cf:64:0d:54:0d:c1:3b:fa:19:1f:8e:81:a0:9e:ae:54:18:87:fc:cd:9d:68:03

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate gem-vpn.connect.uni-hannover.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gem-vpn.connect.uni-hannover.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gem-vpn.connect.uni-hannover.de

Other certificates including the domain name uni-hannover.de

(limited to 100 certificates)
ipmi-please.ims-as.uni-hannover.de
cccmail.ccc.uni-hannover.de
admin.projekt.uni-hannover.de
karte.lernraum.uni-hannover.de
www.ipe.uni-hannover.de
www.duese.uni-hannover.de
login.uni-hannover.de
garm.luis.uni-hannover.de
gem-vpn.connect.uni-hannover.de
visual.ial.uni-hannover.de
www.naturwissenschaften.uni-hannover.de
modkat.dbs.uni-hannover.de
www.leibniz-prinzip.uni-hannover.de
finf.uni-hannover.de
proxy03.lza.tib.uni-hannover.de
www.leibniz-alliance-hannover.de
projekt.iwes.uni-hannover.de
www.ipi.uni-hannover.de
honeypot.finf.uni-hannover.de
www.ccc2.uni-hannover.de
tib.eu
kanban.l3s.uni-hannover.de
wunportal.uni-hannover.de
cmsdev1.w3.uni-hannover.de
gw3.aei.uni-hannover.de
energo.cafm.uni-hannover.de
www.naturwissenschaften.uni-hannover.de
www.piwik-etinf.uni-hannover.de
egw-web1.uni-hannover.de
login.maphy.uni-hannover.de
intrexx.cafm.uni-hannover.de
www.praxispartnerschaft-metallurgie.de
dictionary.uni-hannover.de
studkal.rrzn.uni-hannover.de
handbuch.rrzn.uni-hannover.de
www.aoek.uni-hannover.de
cmsv011.w3.uni-hannover.de
anmeldung-praktikantenamt.maschinenbau.uni-hannover.de
www.phil.uni-hannover.de
se1.slcm.uni-hannover.de
leibniz-juniorlab.de
software.rrzn.uni-hannover.de
www.naturwissenschaften.uni-hannover.de
www.ast.uni-hannover.de
login.finf.uni-hannover.de
pgit.ims.uni-hannover.de
cloud.hci.uni-hannover.de
metager.de
www.atlantic-studies.uni-hannover.de
www.ipi.uni-hannover.de
cmsv08.w3.uni-hannover.de
rrzn-ts1.rrzn.uni-hannover.de
ecal.uni-hannover.de
www.geoq.uni-hannover.de
data.uni-hannover.de
ahgate1.aei.uni-hannover.de
sv-v5.chi.uni-hannover.de
www.phil-relaunch.uni-hannover.de
www.archland.uni-hannover.de
homer.hot.uni-hannover.de
www.luis.uni-hannover.de
login.uni-hannover.de
www.et-inf.uni-hannover.de
cmsv036.rrzn.uni-hannover.de
www.piwik-maphy.uni-hannover.de
data.ikm.uni-hannover.de
www.stud.uni-hannover.de
tib.eu
www.finf.uni-hannover.de
www.hft.uni-hannover.de
listserv.uni-hannover.de
vpn.stahl.uni-hannover.de
mdb.lsp.uni-hannover.de
www.analytik.uni-hannover.de
fistrapu.dekanat.nat.uni-hannover.de
www.chemiedidaktik.uni-hannover.de
qs4.erp.uni-hannover.de
it1.univ.uni-hannover.de
jitka.itp.uni-hannover.de
peer-interaction.idn.uni-hannover.de
wsiw2019.sec.uni-hannover.de
www.t3release.luis.uni-hannover.de
www.econsurvey.uni-hannover.de
git2.hci.uni-hannover.de
www.ptb.uni-hannover.de
www.ipe.uni-hannover.de
www.tfd.uni-hannover.de
sensor-harvest.chi.uni-hannover.de
www.fet.uni-hannover.de
www.mep2014.uni-hannover.de
www.maphy.uni-hannover.de
www.maphy.uni-hannover.de
mailin-ex-2.uni-hannover.de
www.ad.uni-hannover.de
engine.hosting.uni-hannover.de
mail6247.rrzn.uni-hannover.de
webmail.rrzn.uni-hannover.de
qig.itp.uni-hannover.de
www.forum.dezernat4.uni-hannover.de
www.maschinenbau-relaunch.uni-hannover.de

Certificate

The complete raw certificate details for gem-vpn.connect.uni-hannover.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11545962904380999689219577241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 06:18:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-02 06:18:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leibniz Universitaet Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LUIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gem-vpn.connect.uni-hannover.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916334468106185464468308930757116352785737366908292439513220389866876530830652290085487264620187551770909775304423083290124240515571193578305126018684613059450285912714379887992641341863619571285578280582501632144268353649862299470654157345037044216346404256766971254782345883796318523812949176356142632970460589417714771596811410975393939091812811434021266392865742077099763876076338792543382254819588046657620794024514694450293662666663354020165070760982644246367924770595679583444414660161673899464292979599383155773764903265099170973205571155870331404834038496078282488060417351878825899650786693955577729322038416259215355967819031615187605271359957805085898045980440637597621235354621727677242208750936225464685476514260426468167410316458493514856385317076099940861593138992181266464016493526211314715811207864625620985288131217021373175822643914861686963054182250259866920367256929306554276543723920402281578607221634596886993284606309518271742939918340169724533314202681042375997565794481038450618346787237345583598183918378526911698662810316144611212147085857543876277714268208747751336202109503958753357190315641193939701465063996661778482383276608420720400562772543417027326921319538369493753979999450661451188217991328669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be434a60a8232fc1ae941fac568ca0d1fd300ba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem-vpn.connect.uni-hannover.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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